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What Is claimed Is: 

A packet switching apparatus comprising: 
a plurality of lower layer processing units 
which\are connected to physical output ports, and each 
of whira carries out a process for a data link layer 
5 and a physical layer to a packet; 

a table storing flow data including a routing 
data and a aearch key; and 

a processing unit which searches said flow data 
from said tablfe based on a search key of a routing 
10 packet received wia one of said plurality of lower 

layer processing \anits, when said flow data for said 
search key of said Vouting packet is registered on 
said table, and selectively transfers said routing 
packet to one of said Plurality of lower layer 
15 processing units based o^i said routing data of said 
searched flow data. 



2. A packet switching apparatus according to claim 

1, further comprising a packed memory, and 

wherein said processing \anit stores said 
received packet in said packet menaory, and extracts 
said search key from said stored paVket. 



3. A packet switching apparatus according to claim 

1, further comprising a processor carrying out a 
routing process of said routing packet in Response to 



- 47 - 

a routing process request to output said routing data, 
and 

\ wherein said processing unit generates said 
routing process request to said processor, when said 
flow data for said search key of said routing packet 
is not registered on said table, and registers said 
routing data as a part of said flow data for said 
search key \pn said table such that said flow data is 
fully registered, when said routing data is outputted 
from said processor. 

4. A packet switching apparatus according to claim 
3, wherein said processing unit stores said search key 
of said routing packed in said table, when said flow 
data for said search ke^ of said routing packet is not 
registered on said table\ 

5. A packet switching apparatus according to claim 
1, wherein said routing dat a\includes a port number 
specifying a physical output pVrt , and 

wherein said processing uinit selects one of 
said plurality of lower layer processing units based 
on said port number of said routini data of said flow 
data for said search key of said rou\ing packet, and 
transfers said routing packet to said ^selected lower 
layer processing section. \ 
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A packet switching apparatus according to claim 
1 , Njvherein said routing data includes a port number 
spec\fying a physical output port, and 

^wherein said packet switching apparatus further 
a switch fabric connecting between said 
unit and said plurality of lower layer 
processingX unit s , having an arbitration function and 
addressing said routing packet to said lower layer 
processing unit based on said port number. 



comprises 



processing 



A packet* switching apparatus comprising: 
a plurality of lower layer processing units 
which are connected to physical output ports, and each 
of which carries ou^ a process for a data link layer 
5 and a physical layer \o a packet; 

a security unit carrying out encrypting and 
decrypting processes to a first packet based on a 
specific security data in response to encrypt and 
decrypt instructions to produce a second packet, 
10 respectively; 

a table storing flow datfa including a search 
key, routing data and security ds^a; and 

a processing unit which seaiyches a flow data 
from said table based on a search Ke\ of a routing 
15 packet received via one of said plurality of lower 
layer processing units in said packet memory, when 
said flow data for said search key of said\routing 
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jacket is registered on said table and said flow data 
includes said security data, said search key including 
a destination address, transfers said security data of 
said searched flow data as said specific security data, 
said routing packet as said first packet, and one of 
said encryp\ and decrypt instructions to said security 
unit, searchas another flow data from said table based 
on a search ke\ of said second packet from said 
security unit as\a routing packet, when said another 
flow data is registered on said table, and selectively 
transfers said second packet to one of said plurality 
of lower layer processing units based on said routing 
data of said searched another flow data. 

8. A packet switching apparatus according to claim 
7, wherein said processing una\t generates one of said 
encrypt and decrypt instruction^ based on said 
destination address, when said fiNow data for said 
search key of said routing packet \s registered on 
said table and said flow data includes said security 
data. \ 

9 . A packet switching apparatus according to claim 
7, wherein when said flow data for said search key of 
said routing packet received via said lower Yayer 
processing unit is registered on said table aivtd said 
flow data does not includes said security data, \aid 
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processing unit handles said received routing packet 
as \aid second packet to search another flow data from 
said \able based on a search key of said second packet. 

10. A packet switching apparatus according to claim 
7, furtheV comprising a processor carrying out a 
security process for said routing packet in response 
to a security process request to output said security 

5 data for saia routing packet, and 

wherein said processing unit selectively 
generates saidWcurity process request to said 
processor based Vn said destination address, when said 
flow data for saia search key of said routing packet 
10 is not registered oX said table, and registers said 
security data as a paVt of said flow data for said 
search key of said routing packet on said table such 
that said flow data is fully registered, when said 
security data is outputtad from said processor. 

11. A packet switching apparatus according to claim 
10, wherein said processing \anit stores said search 
key of said routing packet inlaid table, when said 
flow data for said search key oi£ said routing packet 

5 is not registered on said table. \ 

12. A packet switching apparatus according to claim 
7, further comprising a processor carrying out a 
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sauting process of said routing packet in response to 
a routing process request to output said routing data, 
and \ 

\^herein said processing unit generates said 
routing process request to said processor, when said 
flow data vspr said search key of said routing packet 
is not registered on said table, and registers said 
routing data a part of said flow data for said 
search key on skid table such that said flow data is 
fully regis tered ,\ when said routing data is outputted 
from said processor. 

13. A packet switching apparatus according to claim 
12, wherein said processing unit stores said search 
key of said routing packers in said table, when said 
flow data for said search kVy of said routing packet 
is not registered on said taod_e. 

14. A packet switching apparatus according to claim 
7, wherein said routing data includes a port number 
specifying a physical output port, land 

wherein said processing unit selects one of 
said plurality of lower layer processiivfi units based 
on said port number of said routing data >of said flow 
data for said search key of said routing packet, and 
transfers said second packet said selected loVer layer 
processing section. \ 
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1>& . A packet switching apparatus according to claim 

7 # \wherein said routing data includes a port number 
specifying a physical output port, and 

wherein said packet switching apparatus further 
comprises a switch fabric connecting between said 
processi\g unit, said security unit and said plurality 
of lower ll^yer processing units, having an arbitration 
function ana addressing said second packet to said 
lower layer processing unit based on said port number. 



A packet Xswitching apparatus comprising: 
a pluralitV of lower layer processing units 
which are connected to physical output ports, and each 
of which carries out\ a process for a data link layer 
and a physical layer fro a packet; 

a security unit \parrying out encrypting and 
decrypting processes to >^ first packet based on a 
specific security data in\response to encrypt and 
decrypt instructions to produce a second packet, 
10 respectively, and selectivelV transfers said second 
packet to one of said plurali\y of lower layer 
processing units based on said Vrouting data; 

a table storing flow data\ including a search 
key, routing data and security da\a ; and 

a processing unit which searches a flow data 
from said table based on a search keA of a routing 
packet received via one of said plurality of lower 
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layer processing units in said packet memory, when 
said flow data for said search key of said routing 
packVt is registered on said table and said flow data 
includes said security data, said search key including 
a destination address, transfers said security data of 
said seaAhed flow data as said specific security data, 
said routing packet as said first packet, and one of 
said encrypt\and decrypt instructions to said security 
unit together with said routing data. 

17. A packet switching apparatus according to claim 
16, wherein said processing unit generates one of said 
encrypt and decrypt instructions based on said 
destination address, wnfen said flow data for said 
search key of said routing packet is registered on 
said table and said flow data includes said security 
data. \ 

18. A packet switching apparatus according to claim 
16, wherein when said flow data r^or said search key of 
said routing packet received via sao_d lower layer 
processing unit is registered on saicl table and said 
flow data does not includes said security data, said 
processing unit selectively transfers sa\d second 
packet to one of said plurality of lower liayer 
processing units based on said routing data ^of said 
searched flow data. \ 
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19. A packet switching apparatus according to claim 
16\ further comprising a processor carrying out a 
routing process of said routing packet in response to 
a process request to output said routing data, and 
selectively carrying out a security process for said 
routing packet based on said destination address of 
said routira packet in response to said process 
request to oVtput said security data for said routing 
packet , and \ 

wherein s\aid processing unit generates said 
process request tea said processor, when said flow data 
for said search key\ of said routing packet is not 
registered on said tatole, and registers said routing 
data and said security N^ata from said processor as a 
part of said flow data fayr said search key of said 
routing packet on said tal^Le such that said flow data 
is fully registered. \ 

20. A packet switching apparatus according to claim 
19, wherein said processing uniAstores said search 
key of said routing packet in saick table, when said 
flow data for said search key of saM routing packet 
is not registered on said table. \ 

21. A packet switching apparatus according to claim 
19, wherein when said flow data for said search key of 
said routing packet is not registered on saidVable, 
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s^id processing unit outputs said routing data and 
5 saicl security data as said specific security data from 
said processor, said routing packet as said first 
packetX and one of said encrypt and decrypt 
instructions to said security unit. 

22. A packet switching apparatus according to claim 

16, wherein raid routing data includes a port number 
specifying a playsical output port, and 



5 plurality of loweur layer processing units based on 
said port number oV said routing data of said flow 
data for said search key of said routing packet, and 
transfers said transmission packet said selected lower 
layer processing section. 

23. A packet switching apparatus according to claim 

16, wherein said routing data includes a port number 
specifying a physical outputs port, and 

wherein said packet switching apparatus further 
5 comprises a switch fabric connecting between said 

processing unit, said security ibit and said plurality 
of lower layer processing units, saving an arbitration 
function and addressing said seconoV packet to said 
lower layer processing unit based on\aid port number. 



wherein said security unit selects one of said 




A method of switching a routing packet 
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^comprising : 

\ searching a table for a flow data based on a 

seanch key of a routing packet, said flow data 
including a routing data and said search key; and 

\transf erring said routing packet to a physical 
output port determined based on a destination address 
of said routing packet, when said flow data for said 
search ke^\ of said routing packet is registered on 
said table A 

25. A method according to claim 24, further 

comprising: \ 

registering said search key on said table when 
said flow data foA said search key of said routing 
packet is not registered on said table; 

carrying out said routing process of said 
routing packet, when said flow data for said search 
key of said routing packet is not registered on said 
table; and \ 

registering said roiking data as a part of said 
flow data for said search ke\ on said table such that 
said flow data is fully registered. 

A method of switching a roVting packet 
comprising: \ 

searching a table for a flow dVta based on a 
search key of a routing packet, said flow data 
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including said search key, routing data and security 
d£M:a, and said search key including a destination 
address ; 

\ selectively generating one of said encrypt and 
decrypt instructions based on said destination 
addres s ;\ 

carrying out one of an encrypting process or a 
decrypting processes to said routing packet based on 
said security data in response to said generated 
instruction, when said flow data for said search key 
of said routing packet is registered on said table and 
said flow data includes said security data, to produce 
another routing packet; 

outputting Vaid another routing packet as a 
transmission packet to a physical output port. 

27. A method according to claim 26, further 
comprising: \ 

outputting said transmission packet to a 
physical output port based\on said searched routing 
data . \ 

28. A method according to claim 26, further 
comprising: \ 

searching said table for aVlow data based on a 
search key of said transmission pacRfit ; and 

transferring said transmis sion \packet to a 
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physical output port determined based on a destination 
addVess of said transmission packet when said flow 
data Vor said search key of said routing packet is 
registered on said table. 
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29. A \nethod according to claim 26, further 
comprising ■ 

when ^aid flow data for said search key of said 
routing packe\ is registered on said table and said 
5 flow data does\not includes said security data, 

selectively transferring said transmission packet to 
said physical output port based on said routing data 
of said searched f\ow data 

30. A method according to claim 26, further 
compris ing 

generating a process request, when said flow 
data for said search key\of said routing packet is not 
5 registered on said table; 

carrying out a routing process of said routing 
packet in response to said process request to output 
said routing data; 

selectively carrying out a security process for 
10 said routing packet based on saM destination address 
of said routing packet in responses to said process 
request to output said security da\a for said routing 
packet ; and 
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registering said routing data and said security 
15 data as a part df said flow data for said search key 
of said routing packet such that said flow data is 
fully registered 
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A method 



according to claim 30, wherein said 
registering includes 

registering said search key of said routing 
packet in said tdble, when said flow data for said 
search key of said routing packet is not registered on 
said table . 
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